fb8b6e5e8ac75b72cb6f37f18c5efcdc_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

fb8b6e5e8ac75b72cb6f37f18c5efcdc_JaffaCakes118
Size

35KB
MD5

fb8b6e5e8ac75b72cb6f37f18c5efcdc
SHA1

e8678f59324a33fbeeb451c74f3c1a908515e692
SHA256

4d2f3654633175e9bd710eef60f039abf9e460bf0748958a12728bab76095199
SHA512

90bcde6af875c3346c18750bf05545a82032e90583aa0fb725fba4c474880824f9656377d71adc7b37462f34660e7b9cdc2f2a7e250fee88333612fe67823809
SSDEEP

768:i1jQKciw/UoSeOCBZCSGq26zSrj33fd/xX4vo7MmPLu:id7ws8Oev2rrjfovoom

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb8b6e5e8ac75b72cb6f37f18c5efcdc_JaffaCakes118

Files

fb8b6e5e8ac75b72cb6f37f18c5efcdc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

65c599242e90b9aafb45e7a8fea596e3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetClipboardData
EmptyClipboard
OpenClipboard
VkKeyScanA
wsprintfA
keybd_event
BlockInput
SetForegroundWindow
SetFocus
ShowWindow
CloseClipboard

ole32

CoInitialize
CoCreateInstance
CoUninitialize

oleaut32

VariantClear
SysAllocString
SysFreeString
VariantInit

kernel32

GetStartupInfoA
GetCurrentProcess
MultiByteToWideChar
GetSystemTime
GetFileSize
SetFilePointer
ReadFile
GetTempPathA
CopyFileA
GetFileAttributesA
OutputDebugStringA
CreateMutexA
ReleaseMutex
ExpandEnvironmentStringsA
TerminateThread
lstrlenA
GetProcAddress
GetModuleHandleA
CloseHandle
ReadProcessMemory
OpenProcess
Module32Next
DeleteFileA
Sleep
TerminateProcess
SetFileAttributesA
Module32First
CreateToolhelp32Snapshot
Process32Next
Process32First
GetModuleFileNameA
ExitProcess
GetLastError
CreateThread
lstrcmpiA
ExitThread
GetTickCount
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObject
CreateProcessA
WriteFile
CreateFileA
GetLocaleInfoA
GetVersionExA
LoadLibraryA
GlobalUnlock
GlobalLock
GlobalAlloc
GetWindowsDirectoryA
InterlockedDecrement
lstrcpynA
lstrcmpA
lstrcpyA

msvcrt

_onexit
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
__dllonexit
_except_handler3
strstr
memset
strcat
strcmp
strcpy
sprintf
strchr
strncpy
srand
memcpy
rand
atoi
free
malloc
strlen
_vsnprintf
??2@YAPAXI@Z
__CxxFrameHandler
_snprintf
strtok
memcmp

advapi32

RegSetValueExA
RegCreateKeyExA
RegCloseKey

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 277KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

65c599242e90b9aafb45e7a8fea596e3

Headers

File Characteristics

Imports

user32

ole32

oleaut32

kernel32

msvcrt

advapi32

Sections

.text Size: 23KB - Virtual size: 22KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 7KB - Virtual size: 277KB

.rsrc Size: 512B - Virtual size: 16B

.text
Size: 23KB - Virtual size: 22KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 7KB - Virtual size: 277KB

.rsrc
Size: 512B - Virtual size: 16B